Windows Phone 8
Windows Embedded 8 Handeld
(fonte WikiPedia)
… Enterprise application software is application software that performs
business functions such as order processing, procurement, production
scheduling, customer information management, energy management, and
accounting. It is typically hosted on servers and provides simultaneous
services to a large number of users, typically over a computer network.
This is in contrast to a single-user application that is executed on a user's
personal computer and serves only one user at a time…
dev.windowsphone.com
2. Export with complete cert chain
1. Install two
Symantec CA
certs
Upload
Code signing
certificate
Distribute during
enrollment
.aet
MDM SERVER
AET cannot
be deleted
through
phone UI
.aetx
AETGENERATOR
TOOL
.aetx
Distribute through
email or secure
website
Secure data
storage
Code signing
certificate
C:\temp2>"c:\Program Files (x86)\Microsoft
SDKs\Windows Phone\v8.0\Tools\AETGenerator\
AETGenerator.exe"
c:\temp\Cert.pfx password
AET.aetx
The Enterprise Id is XXXXXXX
AET.xml, AET.aet and AET.aetx file generated
.aetx
AET is valid for one
year and must be
renewed after
expiration
Publisher ID
AET allows all apps from the
same publisher to be installed
and run on the phone
.xap
Publisher ID
.aetx
12 months
.xap
Publisher ID
24H
.aetx
Publisher ID #1
4. Block apps of
invalid enterprises
from installing and
running
.aetx
Publisher ID #2
1. Report phone ID,
publisher IDs, and
enterprise app IDs
3. Return status for
each enrolled
enterprise
2. Validate
company
accounts
Verify with Application
Enrollment Token (AET)
Verify with
Microsoft
certificates
Microsoft
signed
Store
.aetx
.xap
MDM and
Unmanaged
.xap
Enterprise
signed
Automatic MDIL comp
Microsoft signature
Company
developed hub
fabk.xap
1
MDIL
compile
2
Sign
MDIL code
IL code
MDM
Company Portal
SSP.xap
MDIL code
fabk.xap
1
Sign
SSP.xap
MDIL code
Machine-dependent Intermediate
Language (MDIL)
Tool in sign
mode
Code signing
certificate
Company Portal
SSP.xap
MDIL code
C:\temp>XapSignTool.exe sign
/SignTool "c:\Program Files (x86)\Windows Kits\8.0\bin\x86"
/f "c:\temp\cer 02.pfx"
/p password
c:\temp\SSP.xap
XapSignTool Success: Successfully signed = c:\temp\SSP.xap
Combined
precompile+sign script
Company IT
developed app
PS C:\Program Files (x86)\Microsoft SDKs\Windows
Phone\v8.0\Tools\MDILXAPCompile>
.\BuildMDILXap.ps1
-xapfilename C:\temp\fabk.xap
fabk.xap
IL code
Code signing
certificate
-pfxfilename "C:\temp\cer 02.pfx“
-password mypassword
MDM Server
1. Enroll phone to MDM
.aetx
MDM provides AET
.xap
MDM installs
Company Portal
2. Use Company Portal to install and
view installed company apps
1. Install AET
(email, web page)
2. Install Company Hub (email,
web page)
3. Use Company Hub to view
and install company apps
Enrollment and app installation
require user confirmation
An enterprise cannot push the
AET or apps to the phone
PUSH
.xap
DOWNLOAD
.xap
Backend
Local
DB
Plate Number1
Plate Number2
Plate Number3
Plate Number4
Plate Number1
Plate Number1
Plate Number2
Plate Number2
Plate Number3
Plate Number3
Plate Number4
Plate Number4